Integration ModSecurity with Parallels Plesk Panel 11.5.30

[rcbarnett-zz]

MODSEC-425: Dear Support,

I have problem with logging to file, i have next configuration audit:

[rcbarnett-zz]

Original reporter: andrei

[rcbarnett-zz]

andrei: # -- Audit log configuration -------------------------------------------------

Log the transactions that are marked by a rule, as well as those that

trigger a server error (determined by a 5xx or 4xx, excluding 404,

level response status codes).

SecAuditEngine RelevantOnly
SecAuditLogRelevantStatus "^(?:5|4(?!04))"

Log everything we know about a transaction.

SecAuditLogParts ABIJDEFHZ

Use a single file for logging. This is much easier to look at, but

assumes that you will use the audit log only ocassionally.

SecAuditLogType Serial
SecAuditLog c:\inetpub\logs\modsec_audit.log

Specify the path for concurrent audit logging.

#SecAuditLogStorageDir c:\inetpub\logs\

---

On Parallels Plesk Panel, for work process using user account IWPD_0-9, this user is in the "psacln" usergroup.
So when I put full permission for user account IWPD_0-9 and "IIS_IUSRS" usergroup, logging work perfect, but when I use "psacln" with "IIS_IUSRS" usergroup, not working.

I see next error:

Syntax error in config file c:\inetpub\wwwroot\owasp_crs\modsecurity.conf, line 195: Command failed to execute (check file/folder permissions, syntax, etc.).

How I can fix this problem?